Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/98b6a5df-f4f6-3042-a536-1f369fd28a4b.roa
File:                     98b6a5df-f4f6-3042-a536-1f369fd28a4b.roa (raw, json)
Hash identifier:          V9RhrN80AaUL4ydBea3h1D9jUK+foPSykSAIx3/ig9o=
Subject key identifier:   C4:6D:6F:45:E8:0E:EC:23:BB:81:FA:FC:33:C6:7D:7D:04:42:38:60
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F52880E53696A7894C5015700
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/98b6a5df-f4f6-3042-a536-1f369fd28a4b.roa
Signing time:             Mon 28 Sep 2026 07:05:52 +0000
ROA not before:           Mon 28 Sep 2026 07:05:52 +0000
ROA not after:            Sun 27 Dec 2026 08:05:52 +0000
asID:                     62904
IP address blocks:        50.2.2.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:52:88:0e:53:69:6a:78:94:c5:01:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 28 07:05:52 2026 GMT
            Not After : Dec 27 08:05:52 2026 GMT
        Subject: CN=b498cd67-09b3-4f50-a01e-0f8cb88e91cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f2:f5:b7:e5:5d:fb:f0:32:a1:a2:7d:30:7a:
                    7a:56:10:80:7a:7e:a6:10:65:4c:44:b1:1a:38:d5:
                    e8:9d:1d:fe:49:a0:61:2f:f6:85:b3:72:44:27:89:
                    49:ae:15:d9:cb:93:4f:8c:60:c8:5a:6b:36:f1:92:
                    f5:4f:b6:a6:ad:43:f1:91:40:20:5c:f4:e8:dc:c6:
                    d7:f1:f0:cd:8f:ee:04:20:df:ff:2d:7f:0f:a0:1e:
                    2d:03:44:0f:58:6b:39:5b:dc:98:1d:a0:79:ae:cd:
                    b7:b4:5d:bf:8a:d0:30:f0:a7:48:f6:7e:a1:6d:44:
                    77:f2:5d:32:59:d9:0e:ba:1d:ed:c6:20:19:d5:cc:
                    a8:29:9f:fe:6b:ff:87:13:36:25:2e:63:26:f5:48:
                    d0:cf:98:1e:71:01:01:d2:3d:3d:0b:39:b3:f0:73:
                    e8:dd:4e:8f:ed:23:aa:d5:f7:5c:b3:4f:8b:58:49:
                    c3:33:12:92:b7:f6:0f:2c:4e:ce:f6:55:6e:f6:a1:
                    dd:d1:40:e3:ea:30:88:43:a4:01:86:40:f7:c2:4d:
                    0a:11:81:29:6b:57:d2:d8:ca:eb:ae:32:84:5c:b5:
                    92:ac:94:19:c4:c7:15:f0:8e:8e:16:3f:e0:96:ae:
                    60:7a:83:0f:bb:9d:c8:7c:59:6c:14:60:ad:b9:14:
                    a8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:6D:6F:45:E8:0E:EC:23:BB:81:FA:FC:33:C6:7D:7D:04:42:38:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/98b6a5df-f4f6-3042-a536-1f369fd28a4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.2.2.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:32:8c:86:cf:86:38:ff:c5:6d:cd:28:59:bc:cf:fd:04:6f:
         ec:61:35:c3:71:77:fa:73:34:d4:72:8d:d6:39:85:34:ef:65:
         7e:1d:c8:e4:b6:93:53:6f:52:51:cc:b6:24:09:19:74:1a:9e:
         38:8e:c2:ec:bd:31:17:d6:7e:d9:22:d6:f3:23:98:bf:1a:92:
         40:4f:17:86:00:3b:02:a2:a2:36:1d:58:86:fc:35:e7:e8:cb:
         e3:2c:9a:5a:9d:08:5b:13:ec:d3:94:41:8b:72:c9:ab:89:1d:
         b9:59:48:1e:0b:c7:77:f3:45:b8:11:7a:7d:29:92:06:13:46:
         9a:5f:23:3f:89:f4:ae:30:46:79:16:6e:5f:c9:04:eb:e2:7c:
         eb:03:dd:7f:f4:1e:40:43:3e:28:c7:68:c9:b1:3d:fe:22:00:
         80:37:49:80:a6:93:ce:5e:72:44:ab:b1:79:ca:c9:2a:07:ce:
         d1:eb:40:2b:c6:1e:f2:28:8a:87:cd:62:9a:49:92:8f:0a:d1:
         cc:30:f8:0e:79:1e:e8:96:aa:84:d1:b1:e7:6b:2b:92:02:75:
         c8:e6:af:25:c6:dc:0f:79:ee:c3:da:3b:6d:65:37:5a:ec:b6:
         f5:3d:79:d0:06:25:eb:fa:31:43:e1:3a:82:81:8c:c6:b3:aa:
         cb:fe:15:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:50:07 2026 by rpki-client